$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: +mDJx7VHNw5P3WXg+/tl4hA1JZoCdt0IjgCfG/HPkfw= Subject key identifier: 67:67:19:6D:DE:4F:92:DC:9C:5C:57:65:EA:FF:1C:FC:A4:13:9D:F2 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019747B0EB877F8D4DC961A758F178F48A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 1238 Signing time: Sat 07 Jun 2025 00:01:06 +0000 Manifest this update: Sat 07 Jun 2025 00:01:06 +0000 Manifest next update: Sun 08 Jun 2025 00:01:06 +0000 Files and hashes: 1: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=) 2: 7X_plhmrvkux1oibBja4OB7LETs.roa (hash: gnMgxFgUS9IL4J+87g7lZ1R3Q2jpCUYTvtTDs50/e2w=) 3: 8AIOf5iiWGq0P893PCbTNf2BkGU.roa (hash: HBMubVYts6z6OX4Jo+t8Ek09rhVu9H6F5CshJadR9AA=) 4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=) 5: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=) 6: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=) 7: VEmtcTDf-XxN-2zL8Oay3Fp05IA.roa (hash: l7M61/tXdMzCop4fGPoOrVeYzOpgSiZ8UEnps3mMyhQ=) 8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: 8POqy3oIsh6UyKBAkTeTZQwYyr8GZOYyGKI47Runz/I=) 10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=) 11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=) 12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:b0:eb:87:7f:8d:4d:c9:61:a7:58:f1:78:f4:8a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jun 7 00:01:06 2025 GMT Not After : Jun 8 00:01:06 2025 GMT Subject: CN=6767196dde4f92dc9c5c5765eaff1cfca4139df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:31:ca:97:da:67:01:57:2a:8a:8d:4f:4e: 3e:ae:76:76:61:21:03:e5:5d:98:79:7f:e9:34:9a: 6a:1d:c9:67:fa:ba:47:99:b8:fc:5c:f0:fc:d4:4d: a1:46:61:ba:5b:cd:da:a2:00:45:b3:3d:8e:93:98: e5:29:c4:df:93:77:fe:6d:a2:f4:0d:a7:15:0d:ca: d7:50:58:7f:35:ea:96:1b:07:f1:4d:13:6f:2c:38: 0b:67:8e:47:77:50:d0:fd:5c:69:ea:55:64:8c:6e: d1:a3:ab:00:15:eb:59:cc:58:8a:8b:1f:2c:96:19: a0:79:2e:55:33:97:b9:51:ab:74:1e:80:44:c4:cb: 5f:b0:f5:91:16:55:c2:7f:c4:68:cd:56:ca:52:e3: 86:2b:0f:17:a7:d4:f5:f4:2e:47:3d:55:09:91:b3: d8:a2:27:48:dc:7f:11:3c:ce:a7:e3:d7:db:73:6f: d6:5a:68:9e:07:db:cb:3a:01:f1:e4:a6:c6:22:f6: 2d:df:2b:5b:be:c1:86:11:1d:80:c7:a3:c7:a3:50: 0f:c7:2e:b2:c4:06:61:e5:a7:87:9a:f9:37:96:f7: ab:23:15:68:b8:7d:b5:7f:ec:5b:bc:62:22:66:60: 1f:22:b4:f0:74:de:94:c5:e1:2c:14:6c:53:1c:19: 7e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:67:19:6D:DE:4F:92:DC:9C:5C:57:65:EA:FF:1C:FC:A4:13:9D:F2 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:45:65:01:60:80:7e:a5:01:50:b5:48:a0:5a:9e:55:25:00: 0f:3f:1a:08:9a:24:75:19:62:41:a6:4a:13:2c:6a:f8:58:ff: 20:87:4b:07:b4:94:6e:da:c2:01:2e:e5:86:32:ae:4e:85:a0: 36:2d:e6:e6:21:e3:59:c6:c2:36:f9:17:10:a5:f8:27:ca:47: 23:b0:49:1a:3b:f3:37:07:dd:d4:4a:fc:ee:0a:d7:71:4e:3e: 62:e8:70:f4:65:40:ae:0e:3a:7d:38:09:c9:cb:f4:17:6f:0d: 10:78:2b:9f:e9:7d:50:a9:72:cd:4f:fe:cf:e3:0e:48:48:36: d5:ff:c3:f8:68:c7:3c:c5:fa:f9:cd:f9:ea:4f:8c:47:4e:c0: 06:6c:16:1c:81:23:14:a3:ef:1f:93:52:de:bf:92:db:9a:6d: f7:98:79:89:71:c4:3d:c3:23:0f:01:17:80:34:3e:da:84:25: e9:0e:5c:a7:1e:6e:fb:de:82:30:48:0d:47:6d:a7:5c:93:43: cf:9e:9b:69:e3:ce:24:fb:5f:c2:b5:7c:d2:3c:0c:08:7d:33: 0e:74:e4:21:3e:fa:ed:f7:07:20:19:55:b2:c9:c3:4e:b2:e9: 7f:0e:ee:e1:d3:71:87:34:0c:b9:8d:c3:10:c4:2a:a4:93:5d: cc:20:5e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHsOuHf41NyWGnWPF49IoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjUwNjA3MDAwMTA2WhcNMjUwNjA4MDAwMTA2WjAzMTEwLwYDVQQD Eyg2NzY3MTk2ZGRlNGY5MmRjOWM1YzU3NjVlYWZmMWNmY2E0MTM5ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11ExypfaZwFXKoqNT04+rnZ2YSED 5V2YeX/pNJpqHcln+rpHmbj8XPD81E2hRmG6W83aogBFsz2Ok5jlKcTfk3f+baL0 DacVDcrXUFh/NeqWGwfxTRNvLDgLZ45Hd1DQ/Vxp6lVkjG7Ro6sAFetZzFiKix8s lhmgeS5VM5e5Uat0HoBExMtfsPWRFlXCf8RozVbKUuOGKw8Xp9T19C5HPVUJkbPY oidI3H8RPM6n49fbc2/WWmieB9vLOgHx5KbGIvYt3ytbvsGGER2Ax6PHo1APxy6y xAZh5aeHmvk3lverIxVouH21f+xbvGIiZmAfIrTwdN6UxeEsFGxTHBl+CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdnGW3eT5LcnFxXZer/HPykE53yMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkVlAWCA fqUBULVIoFqeVSUADz8aCJokdRliQaZKEyxq+Fj/IIdLB7SUbtrCAS7lhjKuToWg Ni3m5iHjWcbCNvkXEKX4J8pHI7BJGjvzNwfd1Er87grXcU4+Yuhw9GVArg46fTgJ ycv0F28NEHgrn+l9UKlyzU/+z+MOSEg21f/D+GjHPMX6+c356k+MR07ABmwWHIEj FKPvH5NS3r+S25pt95h5iXHEPcMjDwEXgDQ+2oQl6Q5cpx5u+96CMEgNR22nXJND z56baePOJPtfwrV80jwMCH0zDnTkIT767fcHIBlVssnDTrLpfw7u4dNxhzQMuY3D EMQqpJNdzCBeDQ== -----END CERTIFICATE-----Generated at Sat Jun 7 04:59:51 2025 by rpki-client